      Predicate red : tlc.state.getColor() == 1;
      Predicate green : tlc.state.getColor() == 2;
      Predicate yellow : tlc.state.getColor() == 3;
      // yellow after green
      Formula : [](green -> (! red U yellow));
      Violation handler : ... (Java "recovery" code) ...
